blockwords problem |
Post Reply 
|
| Author | |
Terry 
Senior Member 
Joined: 06 February 2005 Status: Offline Points: 155 |
 Post Options
 Thanks(0)
 Quote Reply
 Topic: blockwords problemPosted: 19 February 2005 at 11:07am |
|
For some reason it seems that more and more blockwords are slipping through the filter. I don't know if I have a problem somewhere or if there is a logic problem that might be occuring in the code. I am on 2.1.2.406 and have a sample of one that made it through this morning that should have been caught 2 different ways on the subject line alone but wasn't. Here is the log extract for transaction 4868: 02/19/05 06:52:10:420 -- (4868) Connection from: 200.171.170.186 - Originating country : Brazil The subject line had the words "Sexually explicit - " in the first part of the subject line and I have this line in by blockwords file - Subject:sexually explicit Do I have to worry about case on these? Terry
|
|
 |
|
|
Terry
Senior Member
Joined: 06 February 2005 Status: Offline Points: 155 |
Post Options
Thanks(0)
Quote Reply
Posted: 20 February 2005 at 9:27am |
|
I may have found the problem here...it appears that what I see in the subject line is not what is exactly there...if I look at the message header I see the following: Subject: =?ISO-8859-1?b?U2V4dWFsbHkgZXhwbGljaXQgLSBNYXNzaXZlIGRpY2sga W4gYWN0aW9uICAgIGxo?= Is it safe to add the following to the blockwords file: Subject:=?ISO or would I be blocking something important here? Terry
|
|
|
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4105 |
Post Options
Thanks(0)
Quote Reply
Posted: 20 February 2005 at 11:42pm |
|
Terry,
In our experience we don't recall seing any legitimate english-language subjects to be needing any kind of decoding; they are all in "plain text". The ?ISO prtion of the subject indicates that the email client needs to perform decoding on the subject to display it. Please note however that different languages and character sets may indeed require that to occur. We'd need to perform a bit of RFC research to come up with a better answer... |
|
|
|
|
Desperado
Senior Member
Joined: 27 January 2005 Location: United States Status: Offline Points: 1143 |
Post Options
Thanks(0)
Quote Reply
Posted: 21 February 2005 at 3:22pm |
|
Terry, This works in MOST cases: ((?i)Subject:=\?ISO\-\d*\-\1?.*\?[a-z0-9]{20,}) The second one blocks about 5 times as many as the first in my system. Same warning that Roberto states above however. Dan S. Edited by Desperado |
|
|
The Desperado
Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.273 seconds.